last executing test programs: 38.670129956s ago: executing program 0 (id=90): r0 = eventfd2(0x7, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r1 = io_uring_setup(0x1096, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="d408f10a5ee82d7d", 0x8}, {0x0}], 0x2) 38.646601316s ago: executing program 0 (id=91): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000200), 0x34}}], 0x1, 0x24008054) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003d80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/107, 0x6b}], 0x1, &(0x7f0000000480)=""/172, 0xac}}], 0x1, 0x20022, 0x0) 38.557190861s ago: executing program 0 (id=92): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x54) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) poll(&(0x7f0000000000)=[{r1, 0x63be}], 0x1, 0xa1) r2 = dup3(r1, r0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000bc0)={0x7, 0xdac0, 0x8, 0x7, 0x13, "4dd5d26bd8b1eb227705ecfba7158d29559dba", 0x5, 0xa4}) 37.674939205s ago: executing program 0 (id=104): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) 37.639007637s ago: executing program 0 (id=106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0x4}, {0x4, 0xfff1}, {0x2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0xc804}, 0x2) 37.500941604s ago: executing program 0 (id=108): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x14}, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x4}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) 37.404276079s ago: executing program 32 (id=108): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x14}, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x4}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) 3.430489957s ago: executing program 3 (id=604): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xffffffde, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 3.382161319s ago: executing program 4 (id=606): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x74, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0, 0x40, 0x1}) r0 = syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x1, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x66ab, 0x4, 0x2, 0x0, 0x0) 2.514160413s ago: executing program 3 (id=615): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 2.513920193s ago: executing program 4 (id=617): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 2.512595253s ago: executing program 2 (id=619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 2.37968416s ago: executing program 1 (id=620): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r1, 0x0, 0x0, 0x0, 0xa, 0x1, {0x3}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(r0, &(0x7f0000000340)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) 2.37927183s ago: executing program 4 (id=621): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x800, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xf7f8000000000001, 0xffffffffffffffff, 0xa) r0 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb6, 0x1, 0xffffffbc, 0x333}) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) socket$inet6_sctp(0xa, 0x4, 0x84) read$eventfd(r1, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 2.065407246s ago: executing program 1 (id=622): perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x1) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0xa}, 0x20) 2.049442327s ago: executing program 4 (id=623): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40010000, 0x1}) r0 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0x801e7}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749d, 0x4, 0x0, 0x0, 0x0) 1.953053761s ago: executing program 1 (id=624): pipe2(&(0x7f0000000140)={0x0, 0x0}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) accept4(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.916986193s ago: executing program 2 (id=625): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r1, 0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.875839025s ago: executing program 2 (id=627): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="000000000102"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 1.837817737s ago: executing program 1 (id=628): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xffffffde, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.761140941s ago: executing program 4 (id=629): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000040)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.629759018s ago: executing program 2 (id=630): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.629559747s ago: executing program 4 (id=631): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x382, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.518974083s ago: executing program 3 (id=633): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8858}, 0x0) close(0x3) 1.359122941s ago: executing program 5 (id=634): ioperm(0x8, 0x3, 0x163b) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x872bc000) r1 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedreceive(r1, &(0x7f0000000100)=""/98, 0x62, 0x0, 0x0) 1.352240202s ago: executing program 3 (id=635): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) listen(0xffffffffffffffff, 0xfffffffe) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)={0x7fffffff, 0x1, 0x4008, 0x8003, 0xd, "db2d496fbecfb8106700"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0xd) 757.800811ms ago: executing program 2 (id=636): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x8000, 0x3) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) openat(0xffffffffffffff9c, 0x0, 0x42, 0x2) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) 468.786326ms ago: executing program 3 (id=637): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x21081e, &(0x7f0000000140)={[{@grpquota}, {@journal_ioprio}, {@quota}]}, 0x1, 0x501, &(0x7f0000000ac0)="$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") sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x20040001) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x4, 0x4765, 0x4085c, 0x8000000081}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) setxattr$incfs_id(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) 466.454296ms ago: executing program 1 (id=647): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x7, 0x8000001}) r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x24000840) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1a00, 0x0, 0x3) 463.169616ms ago: executing program 5 (id=638): unshare(0x22020400) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1, 0x32, 0x0, 0xffffd000) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) close(r1) fsmount(r0, 0x0, 0x3) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 361.799301ms ago: executing program 5 (id=639): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, 0x0}, 0x108) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) 277.026706ms ago: executing program 5 (id=640): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) 210.885999ms ago: executing program 5 (id=641): syz_open_dev$loop(0x0, 0x75f, 0x2a382) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r2, 0x0, 0x0, 0x0) 153.061222ms ago: executing program 5 (id=642): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000000206010100000000000000000000000005000400000000000900020073797a32000000000c000780"], 0x50}}, 0x40000010) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dfe, 0xf}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) 91.095955ms ago: executing program 1 (id=643): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x63, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r2 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0x7ff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.66' (ED25519) to the list of known hosts. [ 33.445818][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 33.445836][ T28] audit: type=1400 audit(1773882085.956:70): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.474980][ T28] audit: type=1400 audit(1773882085.986:71): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.477366][ T3300] cgroup: Unknown subsys name 'net' [ 33.502939][ T28] audit: type=1400 audit(1773882086.016:72): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.617626][ T3300] cgroup: Unknown subsys name 'cpuset' [ 33.623886][ T3300] cgroup: Unknown subsys name 'rlimit' [ 33.776655][ T28] audit: type=1400 audit(1773882086.286:73): avc: denied { setattr } for pid=3300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.806533][ T28] audit: type=1400 audit(1773882086.296:74): avc: denied { create } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.827063][ T28] audit: type=1400 audit(1773882086.296:75): avc: denied { write } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.847514][ T28] audit: type=1400 audit(1773882086.296:76): avc: denied { read } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.867942][ T28] audit: type=1400 audit(1773882086.316:77): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.868372][ T3304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.889441][ T28] audit: type=1400 audit(1773882086.316:78): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.922661][ T28] audit: type=1400 audit(1773882086.316:79): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.957857][ T3300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.792759][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 35.849466][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 35.908102][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 35.934718][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.941897][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.949208][ T3314] bridge_slave_0: entered allmulticast mode [ 35.955630][ T3314] bridge_slave_0: entered promiscuous mode [ 35.962407][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 35.971890][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.979138][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.986367][ T3314] bridge_slave_1: entered allmulticast mode [ 35.993205][ T3314] bridge_slave_1: entered promiscuous mode [ 36.011311][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.018449][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.025696][ T3315] bridge_slave_0: entered allmulticast mode [ 36.032231][ T3315] bridge_slave_0: entered promiscuous mode [ 36.054872][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.062234][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.069419][ T3315] bridge_slave_1: entered allmulticast mode [ 36.076022][ T3315] bridge_slave_1: entered promiscuous mode [ 36.095537][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.120402][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.133054][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.143906][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.172669][ T3314] team0: Port device team_slave_0 added [ 36.192922][ T3314] team0: Port device team_slave_1 added [ 36.210466][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 36.220591][ T3315] team0: Port device team_slave_0 added [ 36.239001][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.246096][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.253463][ T3310] bridge_slave_0: entered allmulticast mode [ 36.259922][ T3310] bridge_slave_0: entered promiscuous mode [ 36.271442][ T3315] team0: Port device team_slave_1 added [ 36.277314][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.284292][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.310323][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.326342][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.333370][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.359313][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.372999][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.380216][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.387379][ T3310] bridge_slave_1: entered allmulticast mode [ 36.393728][ T3310] bridge_slave_1: entered promiscuous mode [ 36.414441][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.421582][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.428878][ T3312] bridge_slave_0: entered allmulticast mode [ 36.435402][ T3312] bridge_slave_0: entered promiscuous mode [ 36.442942][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.450077][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.457327][ T3312] bridge_slave_1: entered allmulticast mode [ 36.464019][ T3312] bridge_slave_1: entered promiscuous mode [ 36.488431][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.495464][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.521687][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.533667][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.555061][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.562106][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.588422][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.600535][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.611453][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.637744][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.653810][ T3314] hsr_slave_0: entered promiscuous mode [ 36.659951][ T3314] hsr_slave_1: entered promiscuous mode [ 36.686910][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.694201][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.701389][ T3318] bridge_slave_0: entered allmulticast mode [ 36.708020][ T3318] bridge_slave_0: entered promiscuous mode [ 36.715387][ T3310] team0: Port device team_slave_0 added [ 36.736192][ T3312] team0: Port device team_slave_0 added [ 36.743240][ T3312] team0: Port device team_slave_1 added [ 36.748973][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.756148][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.763745][ T3318] bridge_slave_1: entered allmulticast mode [ 36.770596][ T3318] bridge_slave_1: entered promiscuous mode [ 36.777979][ T3310] team0: Port device team_slave_1 added [ 36.790295][ T3315] hsr_slave_0: entered promiscuous mode [ 36.796418][ T3315] hsr_slave_1: entered promiscuous mode [ 36.802350][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 36.808138][ T3315] Cannot create hsr debugfs directory [ 36.854710][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.868269][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.877731][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.884702][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.910805][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.922099][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.931496][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.957426][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.989281][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.996250][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.022280][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.033349][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.040374][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.066370][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.099132][ T3318] team0: Port device team_slave_0 added [ 37.128655][ T3318] team0: Port device team_slave_1 added [ 37.164207][ T3312] hsr_slave_0: entered promiscuous mode [ 37.170303][ T3312] hsr_slave_1: entered promiscuous mode [ 37.176206][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 37.182023][ T3312] Cannot create hsr debugfs directory [ 37.198478][ T3310] hsr_slave_0: entered promiscuous mode [ 37.204840][ T3310] hsr_slave_1: entered promiscuous mode [ 37.210938][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 37.216686][ T3310] Cannot create hsr debugfs directory [ 37.246908][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.253974][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.280334][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.293881][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.301122][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.327124][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.397437][ T3318] hsr_slave_0: entered promiscuous mode [ 37.403700][ T3318] hsr_slave_1: entered promiscuous mode [ 37.409966][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 37.415771][ T3318] Cannot create hsr debugfs directory [ 37.470300][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.491605][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.507962][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.524360][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.550493][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.565755][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.574920][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.590333][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.622252][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.634427][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.644244][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.660494][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.698696][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.711888][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.728016][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.738172][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.756263][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.783740][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.808497][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.817973][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.829700][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.842926][ T1639] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.850122][ T1639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.862668][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.873158][ T1639] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.880312][ T1639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.903342][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.913269][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.954593][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.964766][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.979287][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.988898][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.996016][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.019447][ T190] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.026556][ T190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.045315][ T190] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.052546][ T190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.062759][ T190] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.069872][ T190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.085603][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.114559][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.138333][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.145396][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.154371][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.161525][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.179040][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.196595][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.205985][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.213157][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.248182][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.255295][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.307454][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.372594][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.411336][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.476668][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.519296][ T3310] veth0_vlan: entered promiscuous mode [ 38.538274][ T3310] veth1_vlan: entered promiscuous mode [ 38.567306][ T3314] veth0_vlan: entered promiscuous mode [ 38.589613][ T3314] veth1_vlan: entered promiscuous mode [ 38.600216][ T3310] veth0_macvtap: entered promiscuous mode [ 38.626202][ T3310] veth1_macvtap: entered promiscuous mode [ 38.661498][ T3314] veth0_macvtap: entered promiscuous mode [ 38.669618][ T3314] veth1_macvtap: entered promiscuous mode [ 38.683082][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.694787][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.714083][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.722041][ T3318] veth0_vlan: entered promiscuous mode [ 38.735457][ T3312] veth0_vlan: entered promiscuous mode [ 38.743270][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.753785][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.762718][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.772055][ T3315] veth0_vlan: entered promiscuous mode [ 38.782731][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.791562][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.803313][ T3318] veth1_vlan: entered promiscuous mode [ 38.811530][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.820939][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.830461][ T3312] veth1_vlan: entered promiscuous mode [ 38.844268][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.853147][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.863672][ T3315] veth1_vlan: entered promiscuous mode [ 38.888314][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 38.888327][ T28] audit: type=1400 audit(1773882091.406:90): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.wufe4R/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.922913][ T28] audit: type=1400 audit(1773882091.436:91): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.946128][ T3312] veth0_macvtap: entered promiscuous mode [ 38.947250][ T28] audit: type=1400 audit(1773882091.436:92): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.wufe4R/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.964376][ T3315] veth0_macvtap: entered promiscuous mode [ 38.983840][ T28] audit: type=1400 audit(1773882091.436:93): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.009394][ T3318] veth0_macvtap: entered promiscuous mode [ 39.021967][ T3312] veth1_macvtap: entered promiscuous mode [ 39.034239][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.041979][ T28] audit: type=1400 audit(1773882091.436:94): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.wufe4R/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.056139][ T3315] veth1_macvtap: entered promiscuous mode [ 39.083653][ T28] audit: type=1400 audit(1773882091.436:95): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.4tU2vI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.111735][ T28] audit: type=1400 audit(1773882091.436:96): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.129241][ T3318] veth1_macvtap: entered promiscuous mode [ 39.132858][ T28] audit: type=1400 audit(1773882091.496:97): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.165495][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.173503][ T28] audit: type=1400 audit(1773882091.496:98): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="gadgetfs" ino=3852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.191916][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.209099][ T28] audit: type=1400 audit(1773882091.726:99): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.254000][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.265767][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.290163][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.310214][ T190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.319629][ T190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.342749][ T190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.372911][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.388114][ T190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.399007][ T190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.440643][ T190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.504469][ T190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.523661][ T3487] loop0: detected capacity change from 0 to 8192 [ 39.548113][ T190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.563888][ T190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.581011][ T3494] ipip0: entered promiscuous mode [ 39.586242][ T3494] ipip0: entered allmulticast mode [ 39.605233][ T3301] loop0: p1 < > p2 p4 < p5 > [ 39.610083][ T3301] loop0: partition table partially beyond EOD, truncated [ 39.618202][ T3301] loop0: p1 start 134217728 is beyond EOD, truncated [ 39.626790][ T190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.643737][ T190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.656894][ T3301] loop0: p2 size 591360 extends beyond EOD, truncated [ 39.677786][ T3301] loop0: p5 size 591360 extends beyond EOD, truncated [ 39.689527][ T3487] loop0: p1 < > p2 p4 < p5 > [ 39.694287][ T3487] loop0: partition table partially beyond EOD, truncated [ 39.718722][ T190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.747012][ T3487] loop0: p1 start 134217728 is beyond EOD, truncated [ 39.754375][ T3487] loop0: p2 size 591360 extends beyond EOD, truncated [ 39.784533][ T3487] loop0: p5 size 591360 extends beyond EOD, truncated [ 39.886598][ T190] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.949581][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 39.963063][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 39.998504][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 40.010729][ T3520] futex_wake_op: syz.0.13 tries to shift op by -1; fix this program [ 40.287088][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 40.306591][ T3516] udevd[3516]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 40.318534][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 40.671483][ T3530] netlink: 'syz.0.17': attribute type 13 has an invalid length. [ 40.705911][ T3530] gretap0: refused to change device tx_queue_len [ 40.730877][ T3530] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 40.795996][ T3532] loop4: detected capacity change from 0 to 8192 [ 40.965180][ C1] hrtimer: interrupt took 65176 ns [ 41.197100][ T3565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'. [ 41.410657][ T3584] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.418218][ T3584] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.469607][ T3584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.480508][ T3584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.550493][ T30] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.561434][ T30] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.578066][ T30] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.596839][ T30] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.822492][ T3650] loop3: detected capacity change from 0 to 1024 [ 41.834098][ T3650] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 41.848828][ T3650] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 41.860439][ T3650] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 41.871021][ T3650] EXT4-fs error (device loop3): ext4_get_journal_inode:5863: inode #5: comm syz.3.32: unexpected bad inode w/o EXT4_IGET_BAD [ 41.884635][ T3650] loop3: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 41.884783][ T3650] EXT4-fs (loop3): no journal found [ 41.893975][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 41.893994][ C0] EXT4-fs (loop3): initial error at time 1773882094: ext4_get_journal_inode:5863: inode 5 [ 41.894024][ C0] EXT4-fs (loop3): last error at time 1773882094: ext4_get_journal_inode:5863: inode 5 [ 41.936342][ T3650] EXT4-fs (loop3): can't get journal size [ 41.943838][ T3650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.957043][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.987739][ T3660] loop0: detected capacity change from 0 to 512 [ 42.026266][ T3660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.049603][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.059347][ T3660] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.094274][ T3664] loop3: detected capacity change from 0 to 128 [ 42.132560][ T3664] FAT-fs (loop3): bogus logical sector size 2134 [ 42.148582][ T3664] FAT-fs (loop3): Can't find a valid FAT filesystem [ 42.288210][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.860768][ T3508] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 42.883562][ T3682] netlink: 24 bytes leftover after parsing attributes in process `syz.3.42'. [ 42.905683][ T3684] loop2: detected capacity change from 0 to 7 [ 42.930848][ T3303] loop2: [ 42.948732][ T3684] loop2: [ 43.248057][ T3701] loop1: detected capacity change from 0 to 128 [ 43.508002][ T3712] geneve2: entered promiscuous mode [ 43.516782][ T3642] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 43.539082][ T3642] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 43.579140][ T3642] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 43.600708][ T3642] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 43.621030][ T3716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.56'. [ 43.657572][ T3701] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.677185][ T3701] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.874308][ T3318] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.973491][ T28] kauditd_printk_skb: 101 callbacks suppressed [ 43.973512][ T28] audit: type=1400 audit(1773882096.376:201): avc: denied { write } for pid=3723 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.113585][ T28] audit: type=1400 audit(1773882096.616:202): avc: denied { create } for pid=3731 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 44.164365][ T3733] syz.1.59 uses obsolete (PF_INET,SOCK_PACKET) [ 44.171139][ T28] audit: type=1400 audit(1773882096.676:203): avc: denied { listen } for pid=3731 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 44.289889][ T3737] loop1: detected capacity change from 0 to 512 [ 44.338094][ T3737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.355668][ T3737] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.373684][ T28] audit: type=1400 audit(1773882096.886:204): avc: denied { read append open } for pid=3736 comm="syz.1.60" path="/6/file1/blkio.bfq.io_wait_time_recursive" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.419852][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.456454][ T28] audit: type=1400 audit(1773882096.886:205): avc: denied { setattr } for pid=3736 comm="syz.1.60" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.497799][ T3749] loop1: detected capacity change from 0 to 512 [ 44.520437][ T3749] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.539985][ T3749] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.552953][ T3749] EXT4-fs (loop1): 1 orphan inode deleted [ 44.559011][ T3749] EXT4-fs (loop1): 1 truncate cleaned up [ 44.565443][ T3749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.581779][ T3749] EXT4-fs (loop1): shut down requested (1) [ 44.589802][ T3749] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 44.597260][ T28] audit: type=1400 audit(1773882097.106:206): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 44.601319][ T3749] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 44.657156][ T3749] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 44.663733][ T3749] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 44.676671][ T28] audit: type=1400 audit(1773882097.106:207): avc: denied { search } for pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.729373][ T3758] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 44.737156][ T28] audit: type=1400 audit(1773882097.106:208): avc: denied { search } for pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.772907][ T3749] vhci_hcd vhci_hcd.0: Device attached [ 44.779515][ T28] audit: type=1400 audit(1773882097.106:209): avc: denied { add_name } for pid=2982 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.799337][ T3758] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 44.826186][ T28] audit: type=1400 audit(1773882097.106:210): avc: denied { create } for pid=2982 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.848802][ T3758] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 44.858203][ T3758] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 44.867600][ T3758] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 44.878829][ T3755] vhci_hcd: connection closed [ 44.878983][ T310] vhci_hcd vhci_hcd.1: stop threads [ 44.895579][ T310] vhci_hcd vhci_hcd.1: release socket [ 44.905714][ T310] vhci_hcd vhci_hcd.1: disconnect device [ 44.937162][ T3765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.66'. [ 44.955402][ T3769] netlink: 'syz.3.67': attribute type 4 has an invalid length. [ 44.966930][ T10] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 44.972052][ T3769] netlink: 'syz.3.67': attribute type 4 has an invalid length. [ 44.998008][ T3765] team0: Port device team_slave_0 removed [ 45.024663][ T3771] loop2: detected capacity change from 0 to 1024 [ 45.048276][ T3771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.109478][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.340933][ T3794] netlink: 'syz.4.79': attribute type 1 has an invalid length. [ 45.363143][ T3788] loop2: detected capacity change from 0 to 512 [ 45.382411][ T3788] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 45.422518][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.442528][ T3788] EXT4-fs (loop2): 1 truncate cleaned up [ 45.463991][ T3802] loop0: detected capacity change from 0 to 512 [ 45.483134][ T3804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.84'. [ 45.502770][ T3802] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.526948][ T3804] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 45.544454][ T3788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.558842][ T3804] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 45.578752][ T3802] ======================================================= [ 45.578752][ T3802] WARNING: The mand mount option has been deprecated and [ 45.578752][ T3802] and is ignored by this kernel. Remove the mand [ 45.578752][ T3802] option from the mount to silence this warning. [ 45.578752][ T3802] ======================================================= [ 45.627405][ T3802] EXT4-fs error (device loop0): ext4_quota_enable:7188: comm syz.0.83: Bad quota inum: 2, type: 1 [ 45.641594][ T3802] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 45.670497][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.717859][ T3310] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 46.226936][ T3830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.245287][ T3830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.527615][ T3847] loop3: detected capacity change from 0 to 1024 [ 46.567941][ T3847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.595033][ T3847] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: comm syz.3.99: inode #779706732: comm syz.3.99: iget: illegal inode # [ 46.625973][ T3847] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.99: error while reading EA inode 779706732 err=-117 [ 46.647459][ T3853] EXT4-fs error (device loop3): ext4_xattr_block_find:1879: inode #15: comm syz.3.99: corrupted xattr block 113: invalid header [ 46.713951][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.748629][ T1033] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.768175][ T1033] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 46.981967][ T310] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.010050][ T310] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 47.108373][ T310] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.149144][ T310] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 47.287941][ T3879] netlink: 24 bytes leftover after parsing attributes in process `syz.2.111'. [ 47.360007][ T310] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.371001][ T310] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 47.472156][ T310] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.487795][ T310] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 47.651246][ T3873] chnl_net:caif_netlink_parms(): no params data found [ 47.812914][ T3873] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.820217][ T3873] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.827458][ T3873] bridge_slave_0: entered allmulticast mode [ 47.834144][ T3873] bridge_slave_0: entered promiscuous mode [ 47.841265][ T3873] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.848637][ T3873] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.855967][ T3873] bridge_slave_1: entered allmulticast mode [ 47.862684][ T3873] bridge_slave_1: entered promiscuous mode [ 47.888172][ T3873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.917462][ T3873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.939883][ T3873] team0: Port device team_slave_0 added [ 47.947180][ T3873] team0: Port device team_slave_1 added [ 47.984997][ T3873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.992157][ T3873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.018479][ T3873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.066138][ T3873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.080949][ T3873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.124842][ T3873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.202948][ T3908] netlink: 'syz.2.116': attribute type 4 has an invalid length. [ 48.262475][ T3916] netlink: 'syz.2.116': attribute type 4 has an invalid length. [ 48.396303][ T310] bridge_slave_1: left allmulticast mode [ 48.417786][ T310] bridge_slave_1: left promiscuous mode [ 48.448352][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.483553][ T310] bridge_slave_0: left allmulticast mode [ 48.500541][ T310] bridge_slave_0: left promiscuous mode [ 48.507722][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.607500][ T3932] netlink: 'syz.4.119': attribute type 4 has an invalid length. [ 48.640000][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.651828][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.664772][ T310] bond0 (unregistering): Released all slaves [ 48.668048][ T3934] netlink: 'syz.4.119': attribute type 4 has an invalid length. [ 48.694029][ T3931] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.121'. [ 48.766917][ T310] hsr_slave_0: left promiscuous mode [ 48.773052][ T310] hsr_slave_1: left promiscuous mode [ 48.787054][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.806852][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.915821][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.926519][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.950192][ T310] veth1_macvtap: left promiscuous mode [ 48.957514][ T310] veth0_macvtap: left promiscuous mode [ 48.963223][ T310] veth1_vlan: left promiscuous mode [ 48.968817][ T310] veth0_vlan: left promiscuous mode [ 49.082943][ T310] team0 (unregistering): Port device team_slave_1 removed [ 49.130759][ T3873] hsr_slave_0: entered promiscuous mode [ 49.137104][ T3873] hsr_slave_1: entered promiscuous mode [ 49.143520][ T3873] debugfs: 'hsr0' already exists in 'hsr' [ 49.149401][ T3873] Cannot create hsr debugfs directory [ 49.227877][ T3962] loop4: detected capacity change from 0 to 164 [ 49.278921][ T3962] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 49.305880][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 49.305973][ T28] audit: type=1400 audit(1773882101.816:302): avc: denied { mount } for pid=3959 comm="syz.4.131" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 49.365540][ T3873] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 49.400078][ T28] audit: type=1400 audit(1773882101.916:303): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 49.426149][ T3873] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 49.439570][ T3873] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 49.457596][ T3873] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 49.466640][ T28] audit: type=1400 audit(1773882101.936:304): avc: denied { setopt } for pid=3979 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.555671][ T3996] process 'syz.4.138' launched './file0' with NULL argv: empty string added [ 49.558499][ T28] audit: type=1400 audit(1773882101.976:305): avc: denied { create } for pid=3983 comm="syz.4.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.627118][ T3873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.640358][ T28] audit: type=1400 audit(1773882102.006:306): avc: denied { bind } for pid=3983 comm="syz.4.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.677014][ T3873] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.690497][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.697625][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.708188][ T28] audit: type=1400 audit(1773882102.006:307): avc: denied { write } for pid=3983 comm="syz.4.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.739489][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.746685][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.793938][ T28] audit: type=1400 audit(1773882102.066:308): avc: denied { watch watch_reads } for pid=3994 comm="syz.4.138" path="/23/file1" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.840108][ T4010] loop4: detected capacity change from 0 to 512 [ 49.878377][ T28] audit: type=1400 audit(1773882102.106:309): avc: denied { execute_no_trans } for pid=3994 comm="syz.4.138" path="/23/file0" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.903809][ T3873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.954734][ T4010] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.141: inode has both inline data and extents flags [ 49.977133][ T4010] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.983376][ T4010] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.141: couldn't read orphan inode 15 (err -117) [ 49.992629][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 49.992657][ C1] EXT4-fs (loop4): initial error at time 1773882102: ext4_orphan_get:1391: inode 15 [ 49.992709][ C1] EXT4-fs (loop4): last error at time 1773882102: ext4_orphan_get:1391: inode 15 [ 50.033862][ T4010] loop4: lost filesystem error report for type 5 error -117 [ 50.049606][ T4010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.088211][ T3873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.128930][ T28] audit: type=1400 audit(1773882102.646:310): avc: denied { ioctl } for pid=4009 comm="syz.4.141" path="/26/file0/cpu.stat" dev="loop4" ino=19 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.172770][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.288185][ T28] audit: type=1400 audit(1773882102.796:311): avc: denied { bind } for pid=4035 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.412242][ T3873] veth0_vlan: entered promiscuous mode [ 50.422560][ T4044] capability: warning: `syz.4.144' uses deprecated v2 capabilities in a way that may be insecure [ 50.429227][ T3873] veth1_vlan: entered promiscuous mode [ 50.498439][ T3873] veth0_macvtap: entered promiscuous mode [ 50.532042][ T3873] veth1_macvtap: entered promiscuous mode [ 50.578090][ T3873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.610829][ T3873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.642345][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.652954][ T4074] netlink: 'syz.4.153': attribute type 4 has an invalid length. [ 50.671607][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.691605][ T4074] netlink: 'syz.4.153': attribute type 4 has an invalid length. [ 50.708323][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.723136][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.909919][ T4088] netlink: 24 bytes leftover after parsing attributes in process `syz.4.155'. [ 51.061970][ T4104] loop1: detected capacity change from 0 to 128 [ 51.105500][ T4104] syz.1.157: attempt to access beyond end of device [ 51.105500][ T4104] loop1: rw=8390657, sector=129, nr_sectors = 1 limit=128 [ 51.165318][ T4104] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 51.174373][ T4104] syz.1.157: attempt to access beyond end of device [ 51.174373][ T4104] loop1: rw=8390657, sector=130, nr_sectors = 1 limit=128 [ 51.189751][ T4104] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 51.198947][ T4104] syz.1.157: attempt to access beyond end of device [ 51.198947][ T4104] loop1: rw=8390657, sector=131, nr_sectors = 1 limit=128 [ 51.213097][ T4104] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 51.295970][ T4104] syz.1.157: attempt to access beyond end of device [ 51.295970][ T4104] loop1: rw=8390657, sector=132, nr_sectors = 1 limit=128 [ 51.311245][ T4104] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 51.320997][ T4104] syz.1.157: attempt to access beyond end of device [ 51.320997][ T4104] loop1: rw=8390657, sector=133, nr_sectors = 1 limit=128 [ 51.335360][ T4104] Buffer I/O error on dev loop1, logical block 133, lost async page write [ 51.356031][ T4104] syz.1.157: attempt to access beyond end of device [ 51.356031][ T4104] loop1: rw=8390657, sector=129, nr_sectors = 1 limit=128 [ 51.423656][ T4104] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 51.435885][ T4104] syz.1.157: attempt to access beyond end of device [ 51.435885][ T4104] loop1: rw=8390657, sector=130, nr_sectors = 1 limit=128 [ 51.460099][ T4104] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 51.524521][ T4104] syz.1.157: attempt to access beyond end of device [ 51.524521][ T4104] loop1: rw=8390657, sector=131, nr_sectors = 1 limit=128 [ 51.568650][ T4104] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 51.577667][ T4127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.163'. [ 51.588969][ T4104] syz.1.157: attempt to access beyond end of device [ 51.588969][ T4104] loop1: rw=8390657, sector=132, nr_sectors = 1 limit=128 [ 51.609001][ T4104] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 51.618014][ T4104] syz.1.157: attempt to access beyond end of device [ 51.618014][ T4104] loop1: rw=8390657, sector=133, nr_sectors = 1 limit=128 [ 51.632693][ T4104] Buffer I/O error on dev loop1, logical block 133, lost async page write [ 51.975459][ T4153] loop1: detected capacity change from 0 to 4096 [ 52.026654][ T4153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.172719][ T4153] syz.1.170 (4153) used greatest stack depth: 9688 bytes left [ 52.187479][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.341151][ T4181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.185'. [ 52.357059][ T4183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.184'. [ 52.563465][ T4202] ªªªªª6: renamed from wg2 (while UP) [ 53.559712][ T4249] loop4: detected capacity change from 0 to 512 [ 53.615854][ T4249] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 53.630958][ T4249] EXT4-fs (loop4): mount failed [ 54.550498][ T4285] netlink: 24 bytes leftover after parsing attributes in process `syz.2.226'. [ 54.681491][ T4287] loop5: detected capacity change from 0 to 1024 [ 54.773833][ T4289] loop2: detected capacity change from 0 to 128 [ 54.989141][ T4287] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 55.029162][ T4287] System zones: 0-1, 3-36 [ 55.048853][ T4287] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.228: bad orphan inode 134217728 [ 55.067668][ T4287] loop5: lost filesystem error report for type 5 error -117 [ 55.068547][ T4287] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.261901][ T4302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 55.282250][ T4302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.235'. [ 55.293638][ T3873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.323480][ T4302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.235'. [ 55.400315][ T4305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.234'. [ 55.523611][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 55.523657][ T28] audit: type=1326 audit(1773882108.036:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4311 comm="syz.5.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f33e7c799 code=0x7ffc0000 [ 55.569518][ T28] audit: type=1326 audit(1773882108.036:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4311 comm="syz.5.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f33e7c799 code=0x7ffc0000 [ 55.594553][ T28] audit: type=1326 audit(1773882108.076:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4311 comm="syz.5.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f33e7c799 code=0x7ffc0000 [ 55.624590][ T28] audit: type=1326 audit(1773882108.076:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4311 comm="syz.5.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f33e7c799 code=0x7ffc0000 [ 55.649348][ T28] audit: type=1326 audit(1773882108.076:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4311 comm="syz.5.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0f33e7c799 code=0x7ffc0000 [ 55.699865][ T28] audit: type=1326 audit(1773882108.076:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4311 comm="syz.5.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f33e7c799 code=0x7ffc0000 [ 55.808279][ T28] audit: type=1326 audit(1773882108.076:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4311 comm="syz.5.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f33e7c799 code=0x7ffc0000 [ 55.856171][ T28] audit: type=1326 audit(1773882108.076:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4311 comm="syz.5.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f33e7c799 code=0x7ffc0000 [ 55.931589][ T4293] mmap: syz.3.230 (4293) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.944960][ T28] audit: type=1326 audit(1773882108.076:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4311 comm="syz.5.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f33e7c799 code=0x7ffc0000 [ 56.087293][ T28] audit: type=1326 audit(1773882108.076:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4311 comm="syz.5.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f33e7c799 code=0x7ffc0000 [ 57.279392][ T4362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.253'. [ 57.377861][ T4370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.257'. [ 57.399873][ T4371] loop3: detected capacity change from 0 to 512 [ 57.406988][ T4370] team0: Port device team_slave_0 removed [ 57.427020][ T4371] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.458692][ T4371] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 57.474823][ T4371] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.255: bg 0: block 248: padding at end of block bitmap is not set [ 57.489649][ T4371] loop3: lost filesystem error report for type 5 error -117 [ 57.489913][ T4371] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.255: Failed to acquire dquot type 1 [ 57.497374][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 57.497413][ C0] EXT4-fs (loop3): last error at time 1773882110: ext4_validate_block_bitmap:441 [ 57.537621][ T4371] loop3: lost filesystem error report for type 5 error -117 [ 57.539517][ T4371] EXT4-fs (loop3): 1 truncate cleaned up [ 57.562295][ T4371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 57.636599][ T4371] syz.3.255 (4371) used greatest stack depth: 8608 bytes left [ 57.670471][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 57.795624][ T4381] team0: Device ipip0 is up. Set it down before adding it as a team port [ 58.046323][ T4402] loop2: detected capacity change from 0 to 2048 [ 58.059105][ T4402] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 58.101247][ T4402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.207402][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.265915][ T4422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.271'. [ 58.353531][ T4425] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 58.403241][ T4430] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.275'. [ 58.427186][ T4430] netlink: 24 bytes leftover after parsing attributes in process `syz.3.275'. [ 58.609511][ T4440] netlink: 'syz.4.281': attribute type 1 has an invalid length. [ 58.625119][ T4440] bond1: entered promiscuous mode [ 58.632885][ T4440] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.648922][ T4440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.281'. [ 58.658125][ T4440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.281'. [ 58.717125][ T4440] bond1: (slave bridge2): making interface the new active one [ 58.724721][ T4440] bridge2: entered promiscuous mode [ 58.765221][ T4440] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 59.293455][ T4462] loop5: detected capacity change from 0 to 1024 [ 59.417276][ T4462] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 59.573425][ T4462] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.798756][ T4480] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.835956][ T4480] netlink: 'syz.4.297': attribute type 12 has an invalid length. [ 59.843932][ T4480] netlink: 'syz.4.297': attribute type 29 has an invalid length. [ 59.852055][ T4480] netlink: 148 bytes leftover after parsing attributes in process `syz.4.297'. [ 59.855015][ T4483] netlink: 'syz.1.298': attribute type 1 has an invalid length. [ 59.861821][ T4480] Zero length message leads to an empty skb [ 59.897605][ T4483] netlink: 'syz.1.298': attribute type 4 has an invalid length. [ 59.927562][ T4483] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.298'. [ 59.968189][ T310] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 3: comm kworker/u8:6: lblock 3 mapped to illegal pblock 3 (length 3) [ 59.983034][ T310] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 60.008545][ T310] EXT4-fs (loop5): This should not happen!! Data will be lost [ 60.008545][ T310] [ 60.037403][ T3642] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:14: lblock 8 mapped to illegal pblock 8 (length 8) [ 60.074255][ T4470] chnl_net:caif_netlink_parms(): no params data found [ 60.080011][ T3642] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 60.104365][ T3642] EXT4-fs (loop5): This should not happen!! Data will be lost [ 60.104365][ T3642] [ 60.115928][ T3873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 60.139416][ T4498] xt_hashlimit: size too large, truncated to 1048576 [ 60.183363][ T4507] netlink: 24 bytes leftover after parsing attributes in process `syz.5.302'. [ 60.215215][ T4470] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.238854][ T4470] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.253825][ T4470] bridge_slave_0: entered allmulticast mode [ 60.270850][ T4470] bridge_slave_0: entered promiscuous mode [ 60.306882][ T4470] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.320697][ T4470] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.335801][ T4470] bridge_slave_1: entered allmulticast mode [ 60.348176][ T4470] bridge_slave_1: entered promiscuous mode [ 60.404291][ T4470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.431503][ T4470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.472404][ T4470] team0: Port device team_slave_0 added [ 60.497572][ T4470] team0: Port device team_slave_1 added [ 60.535344][ T4470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.549741][ T4470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.583216][ T4470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.614391][ T4470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.622958][ T4470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.649722][ T4470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.678943][ T4470] hsr_slave_0: entered promiscuous mode [ 60.685190][ T4470] hsr_slave_1: entered promiscuous mode [ 60.691461][ T4470] debugfs: 'hsr0' already exists in 'hsr' [ 60.698574][ T4470] Cannot create hsr debugfs directory [ 60.839654][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 60.839696][ T28] audit: type=1400 audit(1773882113.356:400): avc: denied { getattr } for pid=4529 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=515 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.889056][ T28] audit: type=1400 audit(1773882113.406:401): avc: denied { create } for pid=4534 comm="syz.3.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 60.920879][ T28] audit: type=1400 audit(1773882113.426:402): avc: denied { read } for pid=4533 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=515 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.955310][ T28] audit: type=1400 audit(1773882113.426:403): avc: denied { open } for pid=4533 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=515 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.985597][ T4539] tipc: Failed to obtain node identity [ 61.004419][ T4539] tipc: Enabling of bearer rejected, failed to enable media [ 61.019932][ T28] audit: type=1400 audit(1773882113.426:404): avc: denied { setopt } for pid=4534 comm="syz.3.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 61.096827][ T28] audit: type=1400 audit(1773882113.506:405): avc: denied { name_bind } for pid=4540 comm="syz.1.314" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 61.133934][ T4470] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.171147][ T28] audit: type=1400 audit(1773882113.596:406): avc: denied { create } for pid=4528 comm="dhcpcd-run-hook" name="resolv.conf.eth2.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.225988][ T4470] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.245381][ T28] audit: type=1400 audit(1773882113.596:407): avc: denied { write } for pid=4528 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.ipv4ll" dev="tmpfs" ino=2133 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.284346][ T4470] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.294747][ T28] audit: type=1400 audit(1773882113.606:408): avc: denied { append } for pid=4528 comm="dhcpcd-run-hook" name="resolv.conf.eth2.ipv4ll" dev="tmpfs" ino=2133 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.327511][ T4470] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.364266][ T28] audit: type=1400 audit(1773882113.656:409): avc: denied { read } for pid=4547 comm="syz.4.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 61.394228][ T4561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 61.468308][ T4571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.321'. [ 61.586083][ T4470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.617966][ T4470] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.628048][ T4575] xt_l2tp: unknown flags: 10 [ 61.673878][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.681031][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.691342][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.698534][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.764558][ T4470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.779093][ T4470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.852588][ T4594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13588 sclass=netlink_route_socket pid=4594 comm=syz.1.330 [ 61.935834][ T4470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.079960][ T4620] loop1: detected capacity change from 0 to 1024 [ 62.143116][ T4620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 62.177115][ T4620] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.235950][ T4634] loop5: detected capacity change from 0 to 512 [ 62.255475][ T4470] veth0_vlan: entered promiscuous mode [ 62.268432][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 62.281834][ T4470] veth1_vlan: entered promiscuous mode [ 62.300810][ T4470] veth0_macvtap: entered promiscuous mode [ 62.320465][ T4634] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.340290][ T4470] veth1_macvtap: entered promiscuous mode [ 62.350622][ T4640] loop3: detected capacity change from 0 to 1024 [ 62.350694][ T4634] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.374740][ T4470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.388435][ T4470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.402597][ T310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.419953][ T4640] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 62.464578][ T4640] System zones: 0-1, 3-36 [ 62.473190][ T4640] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.340: bad orphan inode 134217728 [ 62.485001][ T4640] loop3: lost filesystem error report for type 5 error -117 [ 62.496838][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 62.510819][ C0] EXT4-fs (loop3): initial error at time 1773882114: ext4_orphan_get:1417 [ 62.519389][ C0] EXT4-fs (loop3): last error at time 1773882114: ext4_orphan_get:1417 [ 62.529332][ T4640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.590121][ T3873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.600053][ T310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.613030][ T310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.627010][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.971520][ T4695] -1: renamed from syzkaller0 [ 63.072420][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.119888][ T4705] tipc: Failed to obtain node identity [ 63.134953][ T4705] tipc: Enabling of bearer rejected, failed to enable media [ 63.941061][ T4734] netlink: 'syz.4.360': attribute type 5 has an invalid length. [ 63.950071][ T4734] __nla_validate_parse: 8 callbacks suppressed [ 63.950086][ T4734] netlink: 1132 bytes leftover after parsing attributes in process `syz.4.360'. [ 63.985768][ T4734] netlink: 24 bytes leftover after parsing attributes in process `syz.4.360'. [ 64.130026][ T4738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.362'. [ 64.523155][ T4747] loop3: detected capacity change from 0 to 128 [ 64.546043][ T4747] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.558809][ T4747] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.599309][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.694902][ T4759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.371'. [ 64.705031][ T4759] netlink: 'syz.1.371': attribute type 7 has an invalid length. [ 64.713745][ T4759] netlink: 'syz.1.371': attribute type 8 has an invalid length. [ 64.745789][ T4759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'. [ 65.538001][ T4816] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 65.636891][ T3511] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.677356][ T4824] loop3: detected capacity change from 0 to 512 [ 65.689941][ T4824] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.725376][ T4824] EXT4-fs (loop3): 1 orphan inode deleted [ 65.732745][ T4824] EXT4-fs (loop3): 1 truncate cleaned up [ 65.739556][ T4824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.755292][ T4824] EXT4-fs (loop3): shut down requested (1) [ 65.762631][ T4824] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 65.771645][ T4824] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 65.782118][ T4824] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 65.788695][ T4824] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 65.798399][ T4824] vhci_hcd vhci_hcd.0: Device attached [ 65.804708][ T4824] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 65.814181][ T4824] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 65.823480][ T4824] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 65.833372][ T4824] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 65.842889][ T4824] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 65.853046][ T4829] vhci_hcd: connection closed [ 65.853110][ T36] vhci_hcd vhci_hcd.3: stop threads [ 65.864372][ T36] vhci_hcd vhci_hcd.3: release socket [ 65.869992][ T36] vhci_hcd vhci_hcd.3: disconnect device [ 66.169250][ T4837] loop1: detected capacity change from 0 to 512 [ 66.181760][ T4837] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.217497][ T4837] EXT4-fs error (device loop1): ext4_quota_enable:7188: comm syz.1.400: Bad quota inum: 2, type: 1 [ 66.228615][ T4837] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 66.255826][ T3318] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 66.368112][ T4851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.404'. [ 66.393709][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.414463][ T4851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.404'. [ 66.467643][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 66.467734][ T28] audit: type=1400 audit(1773882118.986:423): avc: denied { lock } for pid=4856 comm="syz.3.405" path="socket:[11319]" dev="sockfs" ino=11319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.644328][ T28] audit: type=1326 audit(1773882119.156:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.2.411" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ab3c2c799 code=0x0 [ 66.855904][ T28] audit: type=1400 audit(1773882119.366:425): avc: denied { write } for pid=4877 comm="syz.5.414" name="ptype" dev="proc" ino=4026533376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 67.999722][ T28] audit: type=1400 audit(1773882120.516:426): avc: denied { bind } for pid=4906 comm="syz.5.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.093368][ T28] audit: type=1400 audit(1773882120.606:427): avc: denied { relabelfrom } for pid=4912 comm="syz.5.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 68.115112][ T28] audit: type=1400 audit(1773882120.606:428): avc: denied { relabelto } for pid=4912 comm="syz.5.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 68.657265][ T4935] loop3: detected capacity change from 0 to 512 [ 68.677217][ T4935] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 68.712590][ T4935] EXT4-fs (loop3): 1 truncate cleaned up [ 68.734634][ T4935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.156438][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.238978][ T4951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.438'. [ 69.974483][ T4978] loop4: detected capacity change from 0 to 1024 [ 70.023761][ T4978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.061003][ T4978] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.444: inode #779706732: comm syz.4.444: iget: illegal inode # [ 70.078106][ T4978] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.444: error while reading EA inode 779706732 err=-117 [ 70.101031][ T4978] EXT4-fs error (device loop4): ext4_xattr_block_find:1879: inode #15: comm syz.4.444: corrupted xattr block 113: invalid header [ 70.191996][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.243331][ T4984] syzkaller0: entered promiscuous mode [ 70.276596][ T4984] syzkaller0: entered allmulticast mode [ 70.325463][ T28] audit: type=1400 audit(1773882122.826:429): avc: denied { connect } for pid=4992 comm="syz.2.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.723600][ T28] audit: type=1400 audit(1773882123.236:430): avc: denied { bind } for pid=5010 comm="syz.1.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.831246][ T5025] loop2: detected capacity change from 0 to 512 [ 70.884851][ T28] audit: type=1400 audit(1773882123.396:431): avc: denied { mounton } for pid=5034 comm="syz.4.456" path="/85/file0" dev="tmpfs" ino=456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.936989][ T5025] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.998922][ T5025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.019612][ T5025] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.184779][ T28] audit: type=1400 audit(1773882123.696:432): avc: denied { read } for pid=5091 comm="syz.5.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.254064][ T4470] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.283455][ T5099] loop1: detected capacity change from 0 to 512 [ 71.319201][ T5102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'. [ 71.343839][ T5099] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.464: inode has both inline data and extents flags [ 71.376103][ T5099] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.376252][ T5099] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.464: couldn't read orphan inode 15 (err -117) [ 71.385584][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 71.385631][ C1] EXT4-fs (loop1): initial error at time 1773882123: ext4_orphan_get:1391: inode 15 [ 71.385667][ C1] EXT4-fs (loop1): last error at time 1773882123: ext4_orphan_get:1391: inode 15 [ 71.425182][ T5099] loop1: lost filesystem error report for type 5 error -117 [ 71.425879][ T5099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.502163][ T5112] netlink: 24 bytes leftover after parsing attributes in process `syz.3.467'. [ 71.530566][ T5115] loop2: detected capacity change from 0 to 1024 [ 71.581186][ T5115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.000512][ T4470] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.010529][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.083020][ T5130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.471'. [ 72.305708][ T5144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.477'. [ 72.314848][ T5144] netlink: 'syz.3.477': attribute type 7 has an invalid length. [ 72.340429][ T5144] netlink: 'syz.3.477': attribute type 8 has an invalid length. [ 72.364925][ T5144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.477'. [ 72.514204][ T5162] loop4: detected capacity change from 0 to 1024 [ 72.534105][ T5162] __quota_error: 3 callbacks suppressed [ 72.534123][ T5162] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 72.556640][ T5162] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 72.571686][ T5162] EXT4-fs (loop4): mount failed [ 72.586094][ T5162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.488'. [ 72.648136][ T5165] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 72.691799][ T5167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.489'. [ 72.806972][ T5172] netlink: 28 bytes leftover after parsing attributes in process `syz.5.501'. [ 72.862575][ T5179] loop1: detected capacity change from 0 to 1024 [ 72.913580][ T5179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.974380][ T5185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.496'. [ 73.028224][ T5188] loop4: detected capacity change from 0 to 128 [ 73.053842][ T5188] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.076670][ T5188] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 73.102745][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.137240][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.297070][ T5201] syzkaller0: entered promiscuous mode [ 73.304339][ T5201] syzkaller0: entered allmulticast mode [ 73.324627][ T28] audit: type=1400 audit(1773882125.826:436): avc: denied { watch watch_reads } for pid=5203 comm="syz.4.505" path="/proc/249/net" dev="proc" ino=11924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 73.374482][ T5209] loop4: detected capacity change from 0 to 1024 [ 73.418407][ T5209] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 73.447591][ T5209] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 73.475405][ T5209] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 73.507357][ T5209] EXT4-fs error (device loop4): ext4_get_journal_inode:5863: inode #5: comm syz.4.506: unexpected bad inode w/o EXT4_IGET_BAD [ 73.521900][ T5209] loop4: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 73.522514][ T5209] EXT4-fs (loop4): no journal found [ 73.531678][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 73.531702][ C0] EXT4-fs (loop4): initial error at time 1773882126: ext4_get_journal_inode:5863: inode 5 [ 73.531727][ C0] EXT4-fs (loop4): last error at time 1773882126: ext4_get_journal_inode:5863: inode 5 [ 73.566564][ T5209] EXT4-fs (loop4): can't get journal size [ 73.575747][ T5209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.805044][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.042401][ T5252] Illegal XDP return value 4294967274 on prog (id 127) dev syz_tun, expect packet loss! [ 74.141729][ T5257] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.262262][ T5262] netlink: 'syz.1.514': attribute type 5 has an invalid length. [ 74.272859][ T5262] __nla_validate_parse: 1 callbacks suppressed [ 74.272876][ T5262] netlink: 1132 bytes leftover after parsing attributes in process `syz.1.514'. [ 74.294358][ T28] audit: type=1400 audit(1773882126.806:437): avc: denied { write } for pid=5253 comm="syz.4.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.298531][ T5262] netlink: 24 bytes leftover after parsing attributes in process `syz.1.514'. [ 74.362015][ T5267] loop3: detected capacity change from 0 to 256 [ 74.504041][ T5271] syzkaller0: entered promiscuous mode [ 74.514766][ T5271] syzkaller0: entered allmulticast mode [ 74.797056][ T5330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.526'. [ 75.094587][ T5352] netlink: 152 bytes leftover after parsing attributes in process `syz.3.544'. [ 75.347864][ T5366] loop2: detected capacity change from 0 to 136 [ 76.077941][ T5374] netlink: 24 bytes leftover after parsing attributes in process `syz.1.542'. [ 76.156642][ T5380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.543'. [ 76.364771][ T5396] loop3: detected capacity change from 0 to 128 [ 76.727086][ T28] audit: type=1400 audit(1773882129.236:438): avc: denied { watch watch_reads } for pid=5405 comm="syz.2.555" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 76.751845][ T5396] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.764672][ T5396] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.848052][ T28] audit: type=1400 audit(1773882129.366:439): avc: denied { watch watch_reads } for pid=5413 comm="syz.2.557" path="/40/file1" dev="tmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.062624][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.203607][ T28] audit: type=1400 audit(1773882129.716:440): avc: denied { cmd } for pid=5419 comm="syz.2.570" path="socket:[12176]" dev="sockfs" ino=12176 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 77.324611][ T28] audit: type=1400 audit(1773882129.836:441): avc: denied { connect } for pid=5429 comm="syz.5.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.360207][ T5428] loop3: detected capacity change from 0 to 1764 [ 77.370937][ T28] audit: type=1400 audit(1773882129.886:442): avc: denied { read } for pid=5429 comm="syz.5.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.559096][ T5442] loop4: detected capacity change from 0 to 512 [ 77.578274][ T5442] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 77.620683][ T5442] EXT4-fs (loop4): 1 truncate cleaned up [ 77.636996][ T5442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.748509][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.218837][ T28] audit: type=1400 audit(1773882130.736:443): avc: denied { create } for pid=5468 comm="syz.2.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 78.240121][ T28] audit: type=1400 audit(1773882130.736:444): avc: denied { setopt } for pid=5468 comm="syz.2.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 78.803065][ T28] audit: type=1400 audit(1773882131.316:445): avc: denied { bind } for pid=5477 comm="syz.2.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.846964][ T28] audit: type=1400 audit(1773882131.346:446): avc: denied { setopt } for pid=5477 comm="syz.2.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.908592][ T3386] IPVS: starting estimator thread 0... [ 79.028246][ T5483] IPVS: using max 2208 ests per chain, 110400 per kthread [ 79.142798][ T5494] loop5: detected capacity change from 0 to 512 [ 79.170103][ T5494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.184709][ T5494] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.237672][ T3873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.515463][ T5510] loop1: detected capacity change from 0 to 512 [ 79.571892][ T5510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.585659][ T5510] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.635535][ T5510] EXT4-fs (loop1): shut down requested (0) [ 79.649203][ T5510] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 79.658979][ T5510] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 79.669445][ T28] audit: type=1400 audit(1773882132.186:447): avc: denied { write } for pid=5509 comm="syz.1.594" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.692350][ T5510] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 79.702494][ T28] audit: type=1400 audit(1773882132.216:448): avc: denied { setattr } for pid=5509 comm="syz.1.594" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.744975][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.774143][ T23] kernel read not supported for file /syz4 (pid: 23 comm: kworker/1:0) [ 80.805386][ T5529] loop4: detected capacity change from 0 to 256 [ 80.852255][ T5529] FAT-fs (loop4): Directory bread(block 64) failed [ 80.858886][ T5529] FAT-fs (loop4): Directory bread(block 65) failed [ 80.876658][ T5529] FAT-fs (loop4): Directory bread(block 66) failed [ 80.894117][ T5529] FAT-fs (loop4): Directory bread(block 67) failed [ 80.905268][ T5529] FAT-fs (loop4): Directory bread(block 68) failed [ 80.916941][ T5529] FAT-fs (loop4): Directory bread(block 69) failed [ 80.923525][ T5529] FAT-fs (loop4): Directory bread(block 70) failed [ 80.940365][ T5529] FAT-fs (loop4): Directory bread(block 71) failed [ 80.948145][ T5529] FAT-fs (loop4): Directory bread(block 72) failed [ 80.954718][ T5529] FAT-fs (loop4): Directory bread(block 73) failed [ 80.992452][ T28] audit: type=1400 audit(1773882133.496:449): avc: denied { remount } for pid=5526 comm="syz.4.601" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 81.015921][ T5459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 82.031351][ T5652] netlink: 'syz.2.619': attribute type 13 has an invalid length. [ 82.429318][ T5653] loop5: detected capacity change from 0 to 512 [ 82.464017][ T5653] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 82.550035][ T28] audit: type=1400 audit(1773882135.066:450): avc: denied { listen } for pid=5679 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.645987][ T28] audit: type=1400 audit(1773882135.136:451): avc: denied { accept } for pid=5679 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.692469][ T5653] EXT4-fs (loop5): 1 truncate cleaned up [ 82.723607][ T5653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.872533][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 82.891068][ T28] audit: type=1400 audit(1773882135.406:452): avc: denied { bind } for pid=5701 comm="syz.4.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.917611][ T3873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.742054][ T5780] loop2: detected capacity change from 0 to 4096 [ 83.755124][ T5780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.025210][ T5797] loop3: detected capacity change from 0 to 512 [ 84.048366][ T5797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.077836][ T5797] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.096775][ T5793] loop1: detected capacity change from 0 to 2048 [ 84.233158][ T5793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.249183][ T5797] EXT4-fs (loop3): shut down requested (0) [ 84.270591][ T5797] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 84.286841][ T28] audit: type=1400 audit(1773882136.786:453): avc: denied { write } for pid=5808 comm="syz.5.641" name="/" dev="configfs" ino=2035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 84.338644][ T5797] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 84.381258][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.392506][ T5797] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 84.476177][ T4470] ================================================================== [ 84.484344][ T4470] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 84.491849][ T4470] [ 84.494206][ T4470] read-write to 0xffff88811ad696b8 of 8 bytes by task 190 on cpu 1: [ 84.502218][ T4470] __xa_clear_mark+0xf5/0x1e0 [ 84.506958][ T4470] __folio_end_writeback+0xf4/0x360 [ 84.512207][ T4470] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 84.518498][ T4470] folio_end_writeback+0x1c/0x70 [ 84.523472][ T4470] ext4_finish_bio+0x459/0x8b0 [ 84.526173][ T5813] loop1: detected capacity change from 0 to 512 [ 84.528281][ T4470] ext4_release_io_end+0x9f/0x1f0 [ 84.528328][ T4470] ext4_end_io_end+0x18d/0x240 [ 84.528364][ T4470] ext4_end_io_rsv_work+0x15b/0x1f0 [ 84.528397][ T4470] process_scheduled_works+0x513/0xa10 [ 84.528433][ T4470] worker_thread+0x58a/0x780 [ 84.528466][ T4470] kthread+0x22a/0x280 [ 84.528489][ T4470] ret_from_fork+0x150/0x360 [ 84.528529][ T4470] ret_from_fork_asm+0x1a/0x30 [ 84.528566][ T4470] [ 84.528573][ T4470] read to 0xffff88811ad696b8 of 8 bytes by task 4470 on cpu 0: [ 84.528595][ T4470] xas_find_marked+0x213/0x620 [ 84.528623][ T4470] filemap_get_folios_tag+0xfa/0x510 [ 84.528653][ T4470] filemap_fdatawait_keep_errors+0x6c/0x190 [ 84.528678][ T4470] sync_inodes_sb+0x40e/0x4c0 [ 84.528714][ T4470] sync_filesystem+0x102/0x190 [ 84.528742][ T4470] generic_shutdown_super+0x4c/0x220 [ 84.528778][ T4470] kill_block_super+0x2a/0x70 [ 84.528818][ T4470] ext4_kill_sb+0x42/0x80 [ 84.528842][ T4470] deactivate_locked_super+0x75/0x1c0 [ 84.528878][ T4470] deactivate_super+0x97/0xa0 [ 84.528908][ T4470] cleanup_mnt+0x2bb/0x330 [ 84.528941][ T4470] __cleanup_mnt+0x19/0x20 [ 84.528974][ T4470] task_work_run+0x130/0x1a0 [ 84.529001][ T4470] exit_to_user_mode_loop+0x1f4/0x6f0 [ 84.529028][ T4470] do_syscall_64+0x249/0x370 [ 84.529055][ T4470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.529079][ T4470] [ 84.529083][ T4470] value changed: 0xfffffe0000000000 -> 0x0000000000000000 [ 84.529098][ T4470] [ 84.529104][ T4470] Reported by Kernel Concurrency Sanitizer on: [ 84.529137][ T4470] CPU: 0 UID: 0 PID: 4470 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 84.529169][ T4470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 84.529186][ T4470] ================================================================== [ 84.553385][ T4470] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.592881][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.920827][ T3511] Bluetooth: hci0: command 0x1003 tx timeout [ 84.920862][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.147778][ T5813] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 85.240737][ T5813] EXT4-fs (loop1): 1 truncate cleaned up [ 85.261040][ T5813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.361902][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.